CVE-2025-46296

—

CVSS 3.1

5.4 medium

EPSS

<1%p6

Published

Dec 16, 2025 (Dec 16, 2025)

Modified

Jun 17, 2026

Description

An authorization bypass vulnerability in FileMaker Server Admin Console allowed administrator roles with minimal privileges to access administrative features such as viewing license details and downloading application logs. This vulnerability has been fully addressed in FileMaker Server 22.0.4.

Vendors: claris
Products: filemaker server
Weakness: CWE-285
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.